mirror of
https://github.com/MetaCubeX/mihomo.git
synced 2025-12-21 17:50:06 +08:00
90 lines
2.3 KiB
Go
90 lines
2.3 KiB
Go
// Package vision implements VLESS flow `xtls-rprx-vision` introduced by Xray-core.
|
|
package vision
|
|
|
|
import (
|
|
"bytes"
|
|
gotls "crypto/tls"
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"reflect"
|
|
"unsafe"
|
|
|
|
N "github.com/metacubex/mihomo/common/net"
|
|
tlsC "github.com/metacubex/mihomo/component/tls"
|
|
|
|
"github.com/gofrs/uuid/v5"
|
|
"github.com/metacubex/sing/common"
|
|
)
|
|
|
|
var ErrNotTLS13 = errors.New("XTLS Vision based on TLS 1.3 outer connection")
|
|
|
|
type connWithUpstream interface {
|
|
net.Conn
|
|
common.WithUpstream
|
|
}
|
|
|
|
func NewConn(conn connWithUpstream, userUUID *uuid.UUID) (*Conn, error) {
|
|
c := &Conn{
|
|
ExtendedReader: N.NewExtendedReader(conn),
|
|
ExtendedWriter: N.NewExtendedWriter(conn),
|
|
upstream: conn,
|
|
userUUID: userUUID,
|
|
packetsToFilter: 6,
|
|
needHandshake: true,
|
|
readProcess: true,
|
|
readFilterUUID: true,
|
|
writeFilterApplicationData: true,
|
|
}
|
|
var t reflect.Type
|
|
var p unsafe.Pointer
|
|
switch underlying := conn.Upstream().(type) {
|
|
case *gotls.Conn:
|
|
//log.Debugln("type tls")
|
|
c.Conn = underlying.NetConn()
|
|
c.tlsConn = underlying
|
|
t = reflect.TypeOf(underlying).Elem()
|
|
p = unsafe.Pointer(underlying)
|
|
case *tlsC.Conn:
|
|
//log.Debugln("type *tlsC.Conn")
|
|
c.Conn = underlying.NetConn()
|
|
c.tlsConn = underlying
|
|
t = reflect.TypeOf(underlying).Elem()
|
|
p = unsafe.Pointer(underlying)
|
|
case *tlsC.UConn:
|
|
//log.Debugln("type *tlsC.UConn")
|
|
c.Conn = underlying.NetConn()
|
|
c.tlsConn = underlying
|
|
t = reflect.TypeOf(underlying.Conn).Elem()
|
|
//log.Debugln("t:%v", t)
|
|
p = unsafe.Pointer(underlying.Conn)
|
|
default:
|
|
return nil, fmt.Errorf(`failed to use vision, maybe "security" is not "tls" or "utls"`)
|
|
}
|
|
if i, ok := t.FieldByName("input"); ok {
|
|
c.input = (*bytes.Reader)(unsafe.Add(p, i.Offset))
|
|
}
|
|
if r, ok := t.FieldByName("rawInput"); ok {
|
|
c.rawInput = (*bytes.Buffer)(unsafe.Add(p, r.Offset))
|
|
}
|
|
return c, nil
|
|
}
|
|
|
|
func (vc *Conn) checkTLSVersion() error {
|
|
switch underlying := vc.tlsConn.(type) {
|
|
case *gotls.Conn:
|
|
if underlying.ConnectionState().Version != gotls.VersionTLS13 {
|
|
return ErrNotTLS13
|
|
}
|
|
case *tlsC.Conn:
|
|
if underlying.ConnectionState().Version != tlsC.VersionTLS13 {
|
|
return ErrNotTLS13
|
|
}
|
|
case *tlsC.UConn:
|
|
if underlying.ConnectionState().Version != tlsC.VersionTLS13 {
|
|
return ErrNotTLS13
|
|
}
|
|
}
|
|
return nil
|
|
}
|